research-article

Identifying and Analyzing Broadband Internet Reverse DNS Names

Authors:

Neil SpringAuthors Info & Claims

CoNEXT '17: Proceedings of the 13th International Conference on emerging Networking EXperiments and Technologies

Pages 35 - 40

https://doi.org/10.1145/3143361.3143392

Published: 28 November 2017 Publication History

Abstract

Reverse DNS (rDNS) names often contain information not only about core routers in some networks but about hosts on edge networks. Although the rDNS names of routers have been decoded and their naming patterns verified by researchers, the information extracted from edge host rDNS names has been limited to intuitive keywords. In this paper, we develop a methodology for identifying and analyzing rDNS names for broadband Internet end hosts without using any pre-defined keyword. With this methodology, we study whether ISPs use intuitive keywords in their rDNS names and whether rDNS names embed correct information (e.g., whether keyword "cable" indicates cable clients but not fiber or DSL clients).

References

[1]

N. Spring, R. Mahajan, and D. Wetherall, "Measuring ISP topologies with rocketfuel," in SIGCOMM, 2002.

Digital Library

[2]

J. Chabarek and P. Barford, "What's in a name?: decoding router interface names," in Proc. the 5th ACM workshop on HotPlanet, 2013.

Digital Library

[3]

B. Huffaker, M. Fomenkov, et al., "Drop: DNS-based router positioning," ACM SIGCOMM Computer Communication Review, vol. 44, no. 3, pp. 5--13, 2014.

Digital Library

[4]

A. Haeberlen, M. Dischinger, K. P. Gummadi, and S. Saroiu, "Monarch: a tool to emulate transport protocol flowsover the Internet at large," in IMC, 2006.

Digital Library

[5]

M. Dischinger, A. Haeberlen, K. P. Gummadi, and S. Saroiu, "Characterizing residential broadband networks," in IMC, 2007.

Digital Library

[6]

A. Schulman and N. Spring, "Pingin' in the rain," in IMC, 2011.

Digital Library

[7]

L. Quan, J. Heidemann, and Y. Pradkin, "When the internet sleeps: correlating diurnal networks with external factors," in IMC, 2014.

Digital Library

[8]

X. Cai and J. Heidemann, "Understanding block-level address usage in the visible internet," in SIGCOMM, 2010.

Digital Library

[9]

M. Sullivan and L. Munoz, "RFC Draft: Suggested generic DNS naming schemes for large networks and unassigned hosts," Oct. 2006.

[10]

"Project Sonar reverse DNS dataset." https://scans.io/study/sonar.rdns.

[11]

Policy by the numbers, "International broadband pricing study: Updated dataset." https://policybythenumbers.googleblog.com/2015/12/global-broadband-pricing-study-updated.html.

[12]

ITU, "The key ICT data." http://www.itu.int/en/ITU-D/Statistics/Pages/stat/.

[13]

MaxMind, Inc., "Geolite ASN." http://dev.maxmind.com/geoip/legacy/geolite/.

[14]

Y. Lee and N. Spring, "Identifying and aggregating homogeneous IPv4 /24 blocks with Hobbit," in IMC, 2016.

Digital Library

[15]

CAIDA, "The CAIDA UCSD IPv4 Routed /24 Topology Dataset." http://www.caida.org/data/active/ipv4_routed_24_topology_dataset.xml.

[16]

S. C. Johnson, "Hierarchical clustering schemes," Psychometrika, vol. 32, no. 3, pp. 241--254, 1967.

[17]

G. Navarro, "A guided tour to approximate string matching," ACM computing surveys (CSUR), vol. 33, no. 1, pp. 31--88, 2001.

Digital Library

[18]

R Documentation, "Hierarchical Clustering." https://stat.ethz.ch/R-manual/R-devel/library/stats/html/hclust.html.

[19]

CAIDA, "AS to Organization Mapping Dataset." http://www.caida.org/data/as_organizations.xml.

[20]

G. Maier, A. Feldmann, V. Paxson, and M. Allman, "On dominant characteristics of residential broadband Internet traffic," in IMC, 2009.

Digital Library

[21]

Yeow, Addy, "Bitnodes." https://getaddr.bitnodes.io/.

[22]

Time Warner Cable LLC., "Customer network space and DNS patterns." http://postmaster.rr.com/customer_network_space.

[23]

R. Padmanabhan, P. Owen, A. Schulman, and N. Spring, "Timeouts: Beware surprisingly high delay," in IMC, 2015.

Digital Library

[24]

Q. Xu, J. Huang, Z. Wang, F. Qian, A. Gerber, and Z. M. Mao, "Cellular data network infrastructure characterization and implication on mobile content placement," in SIGMETRICS, 2011.

Digital Library

[25]

K. Zarifs, T. Flach, S. Nori, D. Choffnes, R. Govindan, E. Katz-Bassett, Z. M. Mao, and M. Welsh, "Diagnosing path inflation of mobile client traffic," in PAM, 2014.

Digital Library

[26]

L. Rokach and O. Maimon, Data mining with decision trees: theory and applications. World scientific, 2014.

Digital Library

[27]

I. Canadi, P. Barford, and J. Sommers, "Revisiting broadband performance," in IMC, 2012.

Digital Library

[28]

S. Sundaresan, W. De Donato, N. Feamster, R. Teixeira, S. Crawford, and A. Pescapè, "Broadband Internet performance: a view from the gateway," in SIGCOMM, 2011.

Digital Library

[29]

RIPE NCC, "Atlas Probes." https://atlas.ripe.net/probes/.

[30]

Y. Xie, F. Yu, K. Achan, E. Gillum, M. Goldszmidt, and T. Wobber, "How dynamic are IP addresses?," in SIGCOMM, 2007.

Digital Library

[31]

M. Siekkinen, D. Collange, G. Urvoy-Keller, and E. W. Biersack, "Performance limitations of ADSL users: A case study," in PAM, 2007.

Digital Library

[32]

S. Saroiu, P. K. Gummadi, and S. D. Gribble, "A measurement study of peer-to-peer file sharing systems," in Proc. the Multimedia Computing and Networking (MMCN), 2002.

[33]

M. Steiner, T. En-Najjary, and E. W. Biersack, "A global view of KAD," in IMC, 2007.

Digital Library

Cited By

Thiagarajan KCarisimo EBustamante F(2025)The Aleph: Decoding Geographic Information from DNS PTR Records Using Large Language ModelsProceedings of the ACM on Networking10.1145/37093743:CoNEXT1(1-20)Online publication date: 6-Mar-2025
https://dl.acm.org/doi/10.1145/3709374
Tarahomi SSommese Rde Boer PLinssen JHolz RSperotto A(2024)Is a Name Enough? A First Look into Detecting Clouds Using DNS Pointer Records2024 20th International Conference on Network and Service Management (CNSM)10.23919/CNSM62983.2024.10814277(1-5)Online publication date: 28-Oct-2024
https://doi.org/10.23919/CNSM62983.2024.10814277
Arouna ALivadariu IVan Rijswijk-Deij RJonker M(2023)Advancing in Reverse: A Comprehensive Characterization of IN-ADDR.ARPA DeploymentProceedings of the 18th Asian Internet Engineering Conference10.1145/3630590.3630595(37-45)Online publication date: 12-Dec-2023
https://dl.acm.org/doi/10.1145/3630590.3630595
Show More Cited By

Index Terms

Identifying and Analyzing Broadband Internet Reverse DNS Names
1. Networks
  1. Network architectures
    1. Network design principles
      1. Naming and addressing
  2. Network performance evaluation
    1. Network measurement

Recommendations

DNS-based Internet Client Clustering and Characterization
DNS-based Internet client clustering and characterization
WWC '01: Proceedings of the Workload Characterization, 2001. WWC-4. 2001 IEEE International Workshop

This paper proposes a novel protocol which uses the Internet domain name system (DNS) to partition Web clients into disjoint sets, each of which is associated with a single DNS server. We define an L-DNS cluster to be a grouping of Web clients that use ...
Rapid reverse DNS lookups for web servers
USITS'99: Proceedings of the 2nd conference on USENIX Symposium on Internet Technologies and Systems - Volume 2

When a web server wants to learn the domain name of one of its clients, it must perform a lookup in the Domain Name System's "reverse domain", inaddr.arpa. These lookups can take time and may have an adverse impact on the web server's response to its ...

Comments

Information & Contributors

Information

Published In

cover image ACM Conferences

CoNEXT '17: Proceedings of the 13th International Conference on emerging Networking EXperiments and Technologies

November 2017

492 pages

ISBN:9781450354226

DOI:10.1145/3143361

Copyright © 2017 ACM.

Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than the author(s) must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from [email protected].

Sponsors

SIGCOMM: ACM Special Interest Group on Data Communication

Publisher

Association for Computing Machinery

New York, NY, United States

Publication History

Published: 28 November 2017

Permissions

Request permissions for this article.

Request Permissions

Check for updates

Qualifiers

Research-article
Research
Refereed limited

Conference

CoNEXT '17

Sponsor:

SIGCOMM

CoNEXT '17: The 13th International Conference on emerging Networking EXperiments and Technologies

December 12 - 15, 2017

Incheon, Republic of Korea

Acceptance Rates

Overall Acceptance Rate 198 of 789 submissions, 25%

Contributors

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

6
Total Citations
View Citations
349
Total Downloads

Downloads (Last 12 months)21
Downloads (Last 6 weeks)3

Reflects downloads up to 05 Mar 2025

Other Metrics

View Author Metrics

Citations

Cited By

Thiagarajan KCarisimo EBustamante F(2025)The Aleph: Decoding Geographic Information from DNS PTR Records Using Large Language ModelsProceedings of the ACM on Networking10.1145/37093743:CoNEXT1(1-20)Online publication date: 6-Mar-2025
https://dl.acm.org/doi/10.1145/3709374
Tarahomi SSommese Rde Boer PLinssen JHolz RSperotto A(2024)Is a Name Enough? A First Look into Detecting Clouds Using DNS Pointer Records2024 20th International Conference on Network and Service Management (CNSM)10.23919/CNSM62983.2024.10814277(1-5)Online publication date: 28-Oct-2024
https://doi.org/10.23919/CNSM62983.2024.10814277
Arouna ALivadariu IVan Rijswijk-Deij RJonker M(2023)Advancing in Reverse: A Comprehensive Characterization of IN-ADDR.ARPA DeploymentProceedings of the 18th Asian Internet Engineering Conference10.1145/3630590.3630595(37-45)Online publication date: 12-Dec-2023
https://dl.acm.org/doi/10.1145/3630590.3630595
Lyu MHabibi Gharakheili HRussell CSivaraman V(2023)Enterprise DNS Asset Mapping and Cyber-Health Tracking via Passive Traffic AnalysisIEEE Transactions on Network and Service Management10.1109/TNSM.2022.322198120:3(3699-3716)Online publication date: Sep-2023
https://doi.org/10.1109/TNSM.2022.3221981
Wang MLi YZhang HHong AHe JWang J(2023)Knocking Cells: Latency-Based Identification of IPv6 Cellular Addresses on the Internet2023 IEEE Symposium on Computers and Communications (ISCC)10.1109/ISCC58397.2023.10218257(790-796)Online publication date: 9-Jul-2023
https://doi.org/10.1109/ISCC58397.2023.10218257
van der Toorn Ovan Rijswijk-Deij RSommese RSperotto AJonker MBarakat CPelsser CBenson TChoffnes D(2022)Saving Brian's privacyProceedings of the 22nd ACM Internet Measurement Conference10.1145/3517745.3561424(1-13)Online publication date: 25-Oct-2022
https://dl.acm.org/doi/10.1145/3517745.3561424

View Options

Login options

Check if you have access through your login credentials or your institution to get full access on this article.

Full Access

Get this Publication

View options

PDF

View or Download as a PDF file.

eReader

View online with eReader.

Figures

Tables

Media

View Table of Conten